Android Notification DoS: When a GIF Crashes Your Phone (CVE-2025-48631 Incomplete Fix)
CVE-2025-48631 was marked as fixed in Android's December 2025 bulletin — but the fix was incomplete. Here's how I found the bypass.
hulkvision
Recent content on hulkvision
Latest posts
Exploiting JavaScript Interface for Unauthorized Access in a 'global' cryptocurrency exchange android app
How I exploited an exposed JavaScript interface in a major crypto exchange's Android app to perform authenticated actions like placing trades and deactivating accounts.
RCE in Adobe Acrobat Reader for android(CVE-2021-40724)
Path traversal dynamic code loading in Adobe Acrobat Reader for Android led to remote code execution (CVE-2021-40724).